← back
CVE-2020-36233

CVE-2020-36233

EPSS 0.3%
The Microsoft Windows Installer for Atlassian Bitbucket Server and Data Center before version 6.10.9, 7.x before 7.6.4, and from version 7.7.0 before 7.10.1 allows local attackers to escalate privileges because of weak permissions on the installation directory.
Affected products
Atlassian · Bitbucket Data CenterAtlassian · Bitbucket Server

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://jira.atlassian.com/browse/BSERV-12753https://www.kb.cert.org/vuls/id/240785